$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4a78c553-6460-465b-bccd-37534d8006af.roa File: 4a78c553-6460-465b-bccd-37534d8006af.roa (raw, json) Hash identifier: 9hGZpCkJONOEwJZ1zDBf8ZZc0gnOdvNXAhWt81BvT8k= Subject key identifier: 99:C7:71:CE:87:5E:8E:C8:07:2F:7A:15:F4:80:A7:E4:F4:5A:3F:91 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 612332247F54FF820E406B0496AC9339ECE5CE2F Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4a78c553-6460-465b-bccd-37534d8006af.roa Signing time: Mon 27 Jul 2026 00:30:18 +0000 ROA not before: Mon 27 Jul 2026 00:30:18 +0000 ROA not after: Sun 25 Oct 2026 23:59:59 +0000 asID: 16509 IP address blocks: 24.148.128.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:23:32:24:7f:54:ff:82:0e:40:6b:04:96:ac:93:39:ec:e5:ce:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Jul 27 00:30:18 2026 GMT Not After : Oct 25 23:59:59 2026 GMT Subject: serialNumber=5b3360814f8da48b05b286c0cb987b30578320c697f4401749569ce9b5ea642a, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:80:58:3e:c0:f3:68:af:d2:46:cf:52:21:08: 96:99:97:82:9a:b2:01:fc:60:54:95:c3:17:12:d9: be:33:42:4e:6f:91:f2:e8:af:2d:c1:c7:be:d9:50: 80:c5:ab:f5:06:23:89:70:72:90:3c:53:e2:60:4d: de:21:1c:6b:ff:d4:e6:b6:10:1e:06:03:20:be:e4: 0f:f5:97:6c:23:a4:fe:aa:cc:d4:fd:c6:ff:4c:6b: 02:8a:23:55:e9:13:fd:5b:1f:25:bb:4b:8e:e4:52: e0:82:fe:3d:ce:6d:61:7e:7b:d5:62:a2:2a:e4:ec: 4b:3f:89:50:c0:40:92:f3:8b:8c:fd:b0:6f:25:e7: f1:16:07:a3:c1:b1:cd:b4:19:f7:5d:2c:ee:16:8c: 89:95:0c:43:32:e4:2a:5b:65:80:91:ea:0f:78:2b: e7:59:f4:96:c5:78:e3:02:05:48:73:de:36:f1:23: 0f:af:b7:d5:db:de:ee:c2:97:1d:4f:25:24:ab:c3: f6:01:3a:42:43:be:8b:56:29:cb:d1:76:bf:dd:83: be:6f:58:f6:e0:36:87:67:b5:98:9c:ee:19:95:a1: 4d:04:cf:77:94:31:38:2f:dd:38:5e:34:a2:08:3f: ff:dc:8a:a7:63:26:6c:ff:f0:f8:4b:43:81:43:eb: d2:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:C7:71:CE:87:5E:8E:C8:07:2F:7A:15:F4:80:A7:E4:F4:5A:3F:91 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/4a78c553-6460-465b-bccd-37534d8006af.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 24.148.128.0/17 Signature Algorithm: sha256WithRSAEncryption b3:2e:e8:d8:56:63:41:44:57:6d:dd:13:41:11:2f:85:19:a0: 87:8a:7e:eb:70:b0:60:da:00:ef:e6:e9:88:38:c1:a7:57:78: ed:ee:f6:38:05:58:ce:bd:d6:1d:d1:5a:63:f2:9e:c4:14:f9: 00:cc:3b:df:f7:18:b9:51:a1:88:64:87:80:23:ae:e6:32:9a: 01:2d:b4:85:d4:68:da:80:e4:bd:91:29:eb:4e:e4:df:3b:fb: bd:48:1f:cf:da:97:4d:09:de:02:b1:c7:f6:83:fa:eb:cd:76: c8:9d:f6:4f:9c:e7:12:e6:ad:98:81:f7:7f:b6:c3:87:d1:34: 8e:84:27:d0:d4:20:6a:77:29:6c:eb:95:16:e5:b5:da:19:8c: 76:23:48:7d:b2:97:71:cf:65:70:96:98:fd:41:fa:f1:3a:e8: f9:92:83:cc:b7:70:00:1d:7e:78:69:e0:27:ed:b1:2b:a4:04: 0b:42:dd:ba:a1:b8:a7:8e:2b:c1:78:fb:43:5a:12:5c:23:85: 56:e5:f0:d4:a8:08:32:51:b2:13:d0:ba:90:c8:ae:16:a9:2b: 68:77:db:6a:0b:73:05:7a:7b:64:fb:1c:87:62:30:5e:48:8f: c3:63:98:c6:3e:b6:b6:17:07:63:28:3e:38:49:e2:e8:d2:17: 69:c8:12:35 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUYSMyJH9U/4IOQGsElqyTOezlzi8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwNzI3MDAzMDE4WhcNMjYxMDI1MjM1OTU5 WjB6MUkwRwYDVQQFE0A1YjMzNjA4MTRmOGRhNDhiMDViMjg2YzBjYjk4N2IzMDU3 ODMyMGM2OTdmNDQwMTc0OTU2OWNlOWI1ZWE2NDJhMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQD0gFg+wPNor9JGz1IhCJaZl4KasgH8YFSVwxcS2b4zQk5v kfLory3Bx77ZUIDFq/UGI4lwcpA8U+JgTd4hHGv/1Oa2EB4GAyC+5A/1l2wjpP6q zNT9xv9MawKKI1XpE/1bHyW7S47kUuCC/j3ObWF+e9Vioirk7Es/iVDAQJLzi4z9 sG8l5/EWB6PBsc20GfddLO4WjImVDEMy5CpbZYCR6g94K+dZ9JbFeOMCBUhz3jbx Iw+vt9Xb3u7Clx1PJSSrw/YBOkJDvotWKcvRdr/dg75vWPbgNodntZic7hmVoU0E z3eUMTgv3TheNKIIP//ciqdjJmz/8PhLQ4FD69JTAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUmcdxzodejsgHL3oV9ICn5PRaP5EwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzRhNzhjNTUzLTY0NjAtNDY1Yi1iY2NkLTM3NTM0ZDgwMDZhZi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAcYlIAwDQYJKoZIhvcNAQELBQADggEBALMu6NhWY0FEV23dE0ERL4UZoIeK futwsGDaAO/m6Yg4wadXeO3u9jgFWM691h3RWmPynsQU+QDMO9/3GLlRoYhkh4Aj ruYymgEttIXUaNqA5L2RKetO5N87+71IH8/al00J3gKxx/aD+uvNdsid9k+c5xLm rZiB93+2w4fRNI6EJ9DUIGp3KWzrlRbltdoZjHYjSH2yl3HPZXCWmP1B+vE66PmS g8y3cAAdfnhp4CftsSukBAtC3bqhuKeOK8F4+0NaElwjhVbl8NSoCDJRshPQupDI rhapK2h322oLcwV6e2T7HIdiMF5Ij8NjmMY+trYXB2MoPjhJ4ujSF2nIEjU= -----END CERTIFICATE-----Generated at Tue Jul 28 19:31:28 2026 by rpki-client